
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: LNhu2UMiskD4K9fAwbtM37tcw4HnVi8yRBuJaBJAS8o=
Subject key identifier: 38:F9:2F:71:5E:73:60:CA:77:2C:EF:11:5C:C5:02:71:46:BA:5A:B7
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 01ED
Signing time: Wed 29 Jul 2026 04:32:10 +0000
Manifest this update: Wed 29 Jul 2026 04:32:10 +0000
Manifest next update: Wed 05 Aug 2026 04:32:10 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: SVpF5fFNBGrw0mNZhDIUdfQisWm9iO1kraOVKGdv6ps=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Jul 29 04:32:10 2026 GMT
Not After : Aug 5 04:32:10 2026 GMT
Subject: CN=6a69824a-49b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:50:b4:71:e0:47:03:52:73:f0:a7:ef:c7:
7d:8d:9f:eb:b0:f1:42:d7:3b:93:d4:cb:cf:8f:07:
6a:9f:ee:f5:36:d4:18:3b:f8:ed:38:36:8b:03:69:
4a:48:32:83:09:76:c6:82:8a:e2:8e:09:2b:76:e9:
cd:76:84:4b:ed:41:0f:51:76:12:ee:29:c2:e5:8d:
e9:ea:09:01:c8:5f:fe:ae:48:b3:b4:09:df:b3:76:
d2:81:bc:33:60:1d:92:8e:12:3a:34:56:81:a1:b1:
55:8e:03:af:31:a7:8f:4e:aa:20:7f:d7:87:57:0c:
e6:4e:b7:39:d5:23:61:e0:3f:8d:ef:b6:e2:9b:8e:
84:ab:21:d0:98:f1:c6:d7:6c:b6:03:30:67:70:73:
e6:16:14:e3:86:83:da:60:cd:6b:ea:50:f6:d0:c7:
47:cf:49:e9:a3:5a:87:7e:87:c8:71:03:ae:92:99:
11:81:cb:53:5d:f0:08:c7:bf:1b:28:ff:dc:a8:97:
78:49:3b:ea:75:c2:87:af:b0:95:b1:30:c5:37:38:
28:5c:3f:b7:1e:16:ed:e7:0b:1c:7a:c5:ac:0b:c6:
fe:2d:8f:7c:c6:4b:61:29:96:5e:09:86:9d:f6:68:
92:1e:e9:09:70:42:19:68:d4:f4:8c:95:5b:f7:b3:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F9:2F:71:5E:73:60:CA:77:2C:EF:11:5C:C5:02:71:46:BA:5A:B7
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:3d:0e:cc:61:72:cb:ac:44:d9:17:89:1f:db:25:1b:9f:
c0:c0:56:6f:22:f5:11:86:a5:00:81:c2:db:5a:3a:3d:79:69:
96:f8:19:93:a0:51:a7:bb:c4:33:da:e8:b1:9d:88:cd:e3:8c:
cf:47:f4:53:9e:d6:e8:2e:3d:0a:c6:25:a7:19:33:59:53:b3:
05:6f:90:06:54:34:68:e1:ff:2d:a2:da:05:2e:0d:8c:31:51:
85:eb:5f:b5:62:5c:08:6e:c0:b4:ea:d1:9b:40:a3:3a:0f:1f:
c4:12:fd:ae:b0:9d:53:99:a0:35:25:45:a3:cc:e8:85:95:44:
68:de:7e:77:64:e8:f7:ec:d3:db:84:e7:23:c3:cb:f0:04:6b:
da:e1:ec:cf:a6:30:dc:b6:ee:2c:48:aa:60:ce:49:88:c5:e3:
6e:78:0e:a2:4f:d0:0a:f0:fa:9c:37:83:24:ed:ab:ba:b3:5b:
32:d8:9e:c6:3e:39:12:d2:df:63:09:5e:a9:84:c3:85:4d:52:
78:f4:11:d0:d5:04:9b:3b:7b:28:2e:eb:62:bc:ed:7b:ae:1b:
f8:12:e0:1f:69:86:c0:5c:75:36:fe:dc:4f:29:f5:c0:5c:56:
00:d9:75:c4:c9:bb:a4:fc:9d:b5:68:24:65:31:56:a3:5e:4a:
57:00:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:42 2026 by rpki-client